---
title: "create aws cloud account"
method: POST
path: "/cloud-accounts/aws"
tags: ["aws cloud account"]
---

# create aws cloud account

`POST /cloud-accounts/aws`

## Request body

- AWSCloudAccountAPICreateAWSCloudAccount
  - `awsAccountId` string, required — The 12-digit AWS account ID
  - `awsScanConfig` AWSCloudAccountAPIAWSScanConfig, required
    - `auditRole` string — The IAM role ARN that Panther assumes to scan the AWS account
  - `integrationLabel` string, required — The display name for the AWS Cloud Account integration
  - `regionIgnoreList` string[] — Regions to exclude from scanning
  - `resourceRegexIgnoreList` string[] — Regex patterns matching resource ARNs to exclude from scanning
  - `resourceTypeIgnoreList` string[] — Resource types to exclude from scanning (e.g. AWS.S3.Bucket)

## Response `201`

Created response.

- AWSCloudAccountAPIAWSCloudAccount
  - `awsAccountId` string — The 12-digit AWS account ID (immutable)
  - `awsScanConfig` AWSCloudAccountAPIAWSScanConfig
    - `auditRole` string — The IAM role ARN that Panther assumes to scan the AWS account
  - `integrationId` string — The unique ID of the AWS Cloud Account integration
  - `integrationLabel` string — The display name for the AWS Cloud Account integration
  - `regionIgnoreList` string[], required — Regions to exclude from scanning
  - `resourceRegexIgnoreList` string[], required — Regex patterns matching resource ARNs to exclude from scanning
  - `resourceTypeIgnoreList` string[], required — Resource types to exclude from scanning (e.g. AWS.S3.Bucket)

## Other responses

- `400` — bad_request: Bad Request response.
- `409` — exists: Conflict response.
- `500` — service: Internal Server Error response.

---

[API](https://skmtc.dev/panther/apis/panther-rest-api.md) · [All operations](https://skmtc.dev/panther/apis/panther-rest-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/panther/panther-rest-api/revisions/eb177cb9d6a1/schema)